Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144975.roa
File: AS144975.roa (raw, json)
Hash identifier: G7mN8vgbIyd2vYcCamxtX7WFs+rBGLU4GGwhUgOj3jM=
Subject key identifier: 7C:4B:60:E5:BE:4A:B4:34:F6:20:00:A7:F1:81:3D:EA:38:F4:6C:D0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A098DE2BF11EA70094182F2148147BC72E22469
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144975.roa
Signing time: Mon 25 May 2026 01:38:09 +0000
ROA not before: Mon 25 May 2026 01:33:09 +0000
ROA not after: Mon 24 May 2027 01:38:09 +0000
asID: 144975
IP address blocks: 240a:a915::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:09:8d:e2:bf:11:ea:70:09:41:82:f2:14:81:47:bc:72:e2:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:09 2026 GMT
Not After : May 24 01:38:09 2027 GMT
Subject: CN=7C4B60E5BE4AB434F62000A7F1813DEA38F46CD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:05:3e:11:4d:d3:f4:6b:97:13:b6:99:ca:
44:1b:d9:6f:dc:f7:41:60:82:49:4c:a6:d2:a7:dc:
0e:d7:51:01:65:f3:16:85:69:38:c1:98:a1:a7:16:
e4:3a:c9:22:69:37:fd:3a:f5:6b:36:fe:ce:1a:95:
ee:d9:80:aa:e9:de:fb:e5:20:96:0f:eb:80:63:ae:
de:33:8e:66:62:ca:a6:c8:84:93:b4:1c:78:32:b0:
fd:b5:1a:8e:02:bc:3c:5a:0f:31:de:ee:29:fc:2c:
9f:9a:60:d7:13:02:64:27:ec:be:18:6d:68:7f:df:
d0:9b:33:e2:43:95:ba:a6:59:fc:62:03:85:6d:d0:
3a:1c:7e:16:c3:2d:5a:e5:21:38:83:35:5b:0c:8a:
46:65:e3:7c:fd:bf:41:2e:13:46:96:9c:8f:e3:3f:
60:2e:62:3f:dd:71:4d:8b:28:33:89:c3:b8:83:eb:
f2:3e:36:be:1a:7e:80:b2:6b:14:a3:19:a9:9d:36:
a3:93:9b:eb:a2:d2:c8:d9:00:fb:70:1c:92:f0:74:
5a:23:3f:88:a0:61:8b:59:1d:d1:18:5e:3e:63:1d:
ab:02:f4:0d:3f:c6:4f:7a:90:38:24:37:a3:39:65:
10:7d:bf:18:fe:a4:fe:2d:a4:08:9a:5f:a9:48:10:
a0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4B:60:E5:BE:4A:B4:34:F6:20:00:A7:F1:81:3D:EA:38:F4:6C:D0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a915::/32
Signature Algorithm: sha256WithRSAEncryption
6e:df:d2:36:7c:bd:c5:bb:f4:6e:8c:73:17:95:a4:63:61:5d:
3c:d9:29:28:f7:73:31:f5:e0:c0:23:49:2e:76:d6:55:ac:f3:
9d:4c:40:65:e3:2e:63:9c:65:a8:cd:99:cd:37:23:da:d6:3b:
86:64:ef:d5:cc:ff:26:db:45:57:70:9a:88:fa:fd:18:69:9b:
bd:e3:45:c5:00:2f:fe:fe:5a:95:d1:75:31:85:37:87:f5:a3:
c8:6d:92:89:98:1a:ab:d5:c5:c8:e6:3c:03:9d:cd:b0:ab:ee:
23:92:90:17:03:0b:39:0e:29:ef:24:9a:8c:5c:f5:6a:ff:e4:
7c:8c:b2:61:ca:37:7f:a2:7a:8a:95:89:15:8e:7a:31:a3:00:
68:92:2d:1a:14:b0:87:ce:d5:09:85:39:73:e4:9e:b3:20:ed:
ba:d7:e8:db:c7:e3:97:df:5b:59:7c:6a:6f:f6:2e:a3:fe:d4:
72:9c:23:25:77:6d:6f:1b:32:ad:20:41:a3:2d:e2:95:5e:30:
98:2e:3c:5f:9e:b2:be:97:36:2d:d3:36:d2:f5:4f:91:ad:2f:
1c:9c:55:6b:b8:f7:54:19:86:0f:21:e2:06:c7:fc:11:07:83:
8f:75:fe:b2:41:ef:32:64:56:33:c7:63:2c:cc:c6:d1:00:7e:
c1:ff:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:20 2026 by rpki-client